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I. Basis of the report 



1. With regard to the elements of the international application:* 

|X] the international application as originally filed 
[X~[ the description: 
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pages i.i4 




, as originally filed 


pages NONE 




, filed with the demand 


pages NONE 


, filed with the letter of 




f ha n n i m c * 
luC CldilTlb. 






pages 15-19 




, as originally filed 


pages NONE 


, as amended (together with any statment) under Article 19 


pages NONE 




, filed with the demand 


pages NONE 


, filed with the letter of 




the drawings: 






pages 1 -2 




, as originally filed 


pages NONE 




, filed with the demand 


paces NONE 


j filed with the letter of 


the sequence listing part of the description: 






pages NONE 




, as originally filed 


Daaes NONE 




, filed with the demand 


Daees NONE 


, filed with the letter of 





2. With regard to the language, all the elements marked above were available or furnished to this Authority in the language in which 
the international application was filed, unless otherwise indicated under this item. 

These elements were available or furnished to this Authority in the following languag e English which is 

I I the language of a translation furnished for the purposes of international search (under Rule 23.1(b)). 
|X 1 the language of publication of the international application(under Rule 48.3(b)). 

| | the language of the translation furnished for the purposes of international preliminary examination(under Rules 55.2 and/ 
1 — 1 or 55.3). 

3. With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the international 
. preliminary examination was carried out on the basis of the sequence listing: 

contained inthe international application in written form. 

filed together with the international application in computer readable form. 

furnished subsequently to this Authority in written form. 

furnished subsequently to this Authority in computer readable form 

The statement that the subsequently furnished written sequence listing does not go beyond the disc losure in the 
international applicationas as filed has been furinshed. 

The statement that the information recorded in computer readable form is identical to the written sequence listing has 
been furnished. 
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□ 
□ 
□ 
□ 

□ 
□ 



The amendments have resulted in the cancellation of: 

the description, pages 

| | the claims, Nos. 

| ] the drawings, sheet, 



5. □ This opinion has been drawn as if (some of) the amendments had not been made, since they have been considered to go 
beyond the disclosure as filed, as indicated in the Supplemental Box(Rule 70.2(c)).** 

Replacement sheets which have been furnished to the receiving Office in response to an invitation under Article 14 are referred to 
in this opinion as "originally filed. " and are not annexed to this report since they do not contain amendments (Rules 70.16 . 
and 70 J 7). 

* Any replacement sheet containing such amendments must be referred to under item I and annexed to this report. 
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V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 



1. Statement 

Novelty (N) 

Inventive step (IS) 



Claims x ' 6 



Claims NONE 



Claims 1-6 



Claims NONE- 



Industrial applicability (IA) Claims 1~ 6 



Claims NONE 



YES 
NO 

YES 
NO 

YES 
NO 



2. Citations and explanations (Rule 70.7) 

Reference is made to the following documents: 
Dl : US 5872846 
D2 : KR 98-77685 
D3 : KR 98-35958 

NOVELTY(N) Claims 1 to 6 

The subject-matter according to claims 1 to 6 is novel pursuant to Art. 33(2) PCT. 
Dl is considered to represent the most relevant state of the art. 

It discloses a system and method for providing security in DATA communication systems 
where multiple users are coupled to a common receiving system. 

The subject matter of present claims 1 and 6 differs therefrom in that it provides a 
public key transmission system of an improved knapsack type for securing higher safety by 
increasing transmission efficiency by easily producing an public key and hardly 
extracting a private key from the public key. 



INVENTIVE STEP(IS) Claims 1 to 6 

Dl, D2 and D3 don't have particular relevance to the present invention. 

D2 discloses a method . producing a public key and a public key crypt osys tern using said 

method, and D3 discloses the method using random function in producing public key. 

The subject-matter of claim 1 is considered as inventive, since it refers to a improved 

process which is not known or even suggested in the art and in particular in Dl, D2 and 

D3. 

As a consequence, the subject-matter of the dependent claims 2 to 6 is also inventive. 



INDUSTRIAL APPLICABILITY(IA) Claims 1 to 6 



All claims are considered to be industrially applicable 
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Q - (W' 1 *P)(mod M') 

= 435 71 ^cf. 
°l7l^ t P # A-ES^l^eVa, 

4 
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Q = (W _1 *A • E)(mod M') Q cJ-a] A «- (W*B)(mod M') 2.3. *\Q 

{W _1 *(W * BXmod M') • E}(mod M') Q 

W" 1 ^-Jl <L>°-S t^ v ^ SlJL, W _1 *W ^ M'<H1 tfl 

°cM^ 1 °l£.3. l^H^r, 

(B-E)(mod M') 4 ^-tq-. e « (ei, e 2 , e 3 , e 4 , e 5 , e 6 ) -2-5- ^ ^Ji, ^ 

435 = {(12, 17, 33, 74, 157, 316) • (ei, e 2 , e 3 , e 4 , e 5 , e 6 )}(mod 737) Q 
°\7]*\, (12, 17, 33, 74, 157, 316) E ^ ^Tfl ^ ^ 

435 = 12ei + 17e 2 + 33e 3 + 74e 4 + 157e 5 + 316e 6 3.^-3 
<y-^5]-£]7l ^ji E = (1, 0, 1, 1, 0, 1) 1- ^711 ^#«1 ^ ^icf. 

ZLEii4 ; o] Al^Efl^. Brickell, Lagarias $1 Odlyzko, Schnor 7^^ 

7> ^s^c}. HB-ltt cfl-^-S-s] 3* r 7]xi -^i ^-Jiel#(Lattice Basis 

Reduction Algorithm)^ 5-7i*V ^^S. (Low Density) ^m^-jo. °\x^. 

^^-^^1 u)]^ ^-7-11 (Knapsack Problem) ^Efl^ ^-7fl7l *i^l^Eji£. Chor-Rivest 
°fl ^tt i%\ n fl^ 3£r ^. £ it>: <&3?1 7 A23. ej-ajaj 5lc>. 

5 
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-g- 3i#7> ^<*-g- ol^-*V ^EflS^ ^7fl^l tfl^Hl ^^7> 

-I- oj-g-ev afl^- ^Efl ^7fl7l *&^-§r afl^tj-. 4^1 tfl^l 2f 

71- Hit A>-g-^ S ^i ^7fl?l ^ 7)]<y7ll-ol <y<q<2] ^nfl^-fr 

4. trl-^A-l, «V^o} ^ o_ ^V-*V ^eflo^ 2t^ 7 \ -<*^- °l-§-^ ^fl^l 

A: X A: 

k] ^ k 2 7> ^o]^ 12 7 > 3 ^aV^ ^^olj7 ; n 

kiXk 2 S. n 7fl^ z$m-§r ^f>\±r 7^711- ^§Kr 

7y°l7)5L^K] kjXk2 ^ n 7flfil =§1^- i^-STl-^ ^-7lM# 

#31; 

^^l^l-i^l- ^ n 7HS1 cf^ 7«^ t.lJL<I E={ei,e 2 ,...,e n }, 
eie{0,l} S. ia-711; 

^7^9] ulecg E - zvzv -^7^11- °l-g-§M ov^s).^^ ^Ml; 
°o v SS>sl ^JS.* ^-^1^1-^ t-)|oiEi S «- #31; 

3^ tilolEi S « ^<Q^1 ^Wrr #711; ^ 

^o V 7l CflolEi S # 7H<y^l» ol-g-sl-^ ol^l^iL 

6 
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c-ll oi Ei l- ^#§V^ ^wl^VJi, ?H<?]7ll- ^ A ^l-fe #7fl* ^l^l^Ji ^1 °1 *\ 1- 

^#*Hr #31 *H1 ^-t^Rr ^}-ir 4if-*j o_s. e>fe iLS ^^^l 1 }. 

^#§>fe 3* Jit* <H ^ ^1 % v *r 5U^. A o V 7lS] ^-fofl si<H>H, ^-iS|-*|-7l 
ol^l jgiL cflolE^ E 1- ^SHVTfl ^ Sicf. 

°1 ^ 7)1 o] ?1 (cct, Wi, W 2 , M) «- 3^1, ^7l>H CC, 

n7flS] Ki XK 2 ^#71- ^l!^, Wi £r Ki XKi ^t^, W 2 K 2 xK 2 

*8 1 °M , AA^r 3,^7} ^<*°\] 2) is}- tifl^- ^Eflo^ ^-7fl7l ^^EfloflA^ B,. W, 



<M ^ ki, k 2 , h, h, .... ,l u » 



k ] X & 2 >3, 2<e/< k , X A: 2 -l 



ft 



= I/, 



5=1 



ej-ul Sit} (^7)1 110). 



^ ^, 4 s 



(1 <s<u) 



7 
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(Superincreasing Integer Sequence) u 7fl-i- -^^oj-ji °l3i-§- 

d s = ( d s,l> d s.2> --> d s,0 1<S<U , , , , _ N . ^ . _ . 

5} tbt} (120). S^7f ^<to] 



# X # 

ZL ^, 3.7)7} 1 2 o]jl ^ ^ 7f n «?] 

(Superincreasing Matrix Sequence) * ^4 ^o] ^^tb^f (#31 130). °] *J 

1 <t<n, 1 </< At,, 1 </< 
€1* CC t =[cc t .uj)] «r *>3L, - ol«r 4 

CCUij) ^o] ^^^cV. 

l</< /, 

© (ij)=(l,D *1 , cct.(i.i) = di.t 3. *}JL, 



cc,(i.i) ^ /=/ '" Hl # "Jr^Kr 

(positive random integer) S. ^^*lc}. 

(/-iVc-V-l 

© (ij) 7} 2 - (i-Dk-2 + j " u-1 Si %-°r, i=1 



8 
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S /,+ ! <t<n 



s- 1 



°1 ^ CCt.(i.j)fe 



i<<< E /, 



© (ij)7> (i-l)k2+j = U 91 



.7= I 



CCt(ij) 



3 <£<4 3^5. 



(/-!)*,+/- 1 



® (ij) 7V ' <?] CC t .(ij) 



77 



© (ij) 7> 



\_i O I 



1 <t<n 



°)H cctiij) 
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= 0 SLS. ^fb^r. 

zl Jf, ^ M -§- cf^-^q- 7 E vo] ^Hfl*Vtq- (<£?fl 140). 
M > Max{J (i n + I 5=1,2,...,?./} 

^ ^, n 7flsl <y^1^ n , r 2 , ... , r n ■& #^^-(#31 150).. 

3 Jf, cc, fi| zv ol^oi] rt # dtb * M <*)1 sl^: °cM^* *3 

1 (^t^l 1 oil M-El-VE ^°1 c t eJ- W) 1- (#31 160). 

l] 

^(«v) = c ^(*v) +r ^ modM > 



^, { 1,2, ...,n } 1 tfl^ fr*1 t, V^f t 7] (permutation function) 



b = c (t , 

# >{d«i*H * (#31 170). #71 cc.fi! 4 ^^Ml r, 

% e]*H=- #n (^7)1 150 ^ 160) HLfe «r^7l ^» 3-§-*l"cr #31 (^Tfl 

oil ^S. 



A: , X A' , k~Xk~ 

ZL iEL7l7V 1 Sif ^ Z olJL, SIJI^-I- M fi-1 0 J<*1 



10 
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fMl 21 ^1<+-Sr i> °fl ^flsVS-S- ^ Wi s+ w 2 i- <d^jtt 

(180). °)3-^ 7fl9j7l cct (5&^ bi , b 2 , ... , b n ), Wi ,W 2 , M, 71 °1 ^ 

4^ ^<H]^i ^tb 7fl<?l7lS^-Ei ^-7fl^l# ^^^Cf (CJ-711 190). 

a„ (1<*<«) 

#31 (190)<H1 n 7ffil SJ1 1- C}-g-u2f 7 e Vol AgA^cf. 

a t = M^iw, (mod A/) 
' ' iL3. 5}d] a t 21 zv 0 2f M ^-°H1 

tt^. °1S.^ ^7fl?l a t = (ai , a 2 , ... , a n ) A Q^Q^. 

5L 2^ S- 121 21-^^lAi ^-7fl7ll- ol-g-*>^ ^^^j7.^> ^ ^J±# 2J- 

olfoj^lc} (^Tfl 210 55 220). 

E-ie u e 2 ....,e.), e,e{0,l) ^ ^ 

2i^5>€ Al^l- SBf S ^*H4 2 2f £o] 5 a] 

2] 
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n 



r= l 

-1 -1 

W j , W 2 

s^l ^-*vo.^.m) ^ cf^l ^Jl-£-^ ^^^q- (#7fl 310 ifl*l 330). 
^€ Si ole} ^ Sj ^ 3 4 £4. 

[^^H 3] 



5- j = w j 1 , ( mod A/) 



pri/KR 0 0/0 0640 



r= 1 /= 1 r= 1 



=L Sf-, 3^ u o V ^S] *T*W ^l-g-^V^ 



7i 

(e ,,e 2 ,....e ,) 5 i t (i t ir s i, 



1 - ' fil «fl7> Sj^ " ol 3,^7}- ^'lols.J 

xj si ^Tfl ^ 4^ 



4* #<H, ' 1 - C1 - 1) i-c*t* a > # ^ Vol „ 130 „ o1 _ 1( ^ 

^1o] {30,74,147} <>le|- s}^, "130" ^ "147" Jit)- ^.2.2.3. sfl^ "0" .£.3. 
£l JL <S^-°r ^>*1 ^31, "130" ^ "74" Q ti]Mf>}^ QA?} ^rM^K °1 nfl 

130-74 = 56 °]E.S. sfl^ "1" 3. ^bJ^. "H B n^S "56" -Sr "30" ^ *]3Llt 
ofl "56" °1 "30" }Lt\- 3ES sfl^ "1" 3 trj-el-^ ^-^i^> s}^ 24 ^ 

sflfe {1,1,0} 7> ^cf. oi^}^ oi ^-o^o] ^l^oioilTfl^ QJai-^o.S- <a-el 



( i , £ ?, 5 ) 
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w=I 1 + l 0 +... + I v 



v£{l,2,...,w-l} 



v S | - t c t 



C [ v/&,] -t- 1 , v-H 1 - [ • ) 



(^w+P^M'+2 ?###? ^w+/ v+1 ) 



3 St* 3^1, 



7V S^7V^1 ^-fr ^>fl 
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E (^j,62,--,^„) 



[a i] 







NTRU 


RSA 




n 


rf 


•j 
rf 




n 


rf 


rf 




rf 


n 


n 




rf 


n 


n 




1.5 - 1 


3 or 4 -1 


1 - 1 



S. 1 oil u > a > £ ^^-8- NTRU PE^r RSA Al^ofl u) 

*M ^JlSJ- £ 42.Jr£f ^S.7f hhV#* ° s v ^fl^l 7 ^°1 3? 
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aj-tgofl 4=. Oj^l JiS ^^^r ^^7} ^<g# U|)U- ^ EH 

3 ^7^] (low density) « 41 ^-§- ^r^r 

£7> nfl-?- 1-2} RSA Al^Eflo] #5^1^ =-4*-^ - ol^ 

tffe^i, o]^l ^iif nflsfl* ^^ % v t^-o, *,j 3 ?\ 7 \ 

^■^A t Si^^- ^ ^*H1 ^sl* feU ^ 5U°.°^ l-nS^, 3 
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A: X A: 

kiXk 2 3. ^-^^ n 7fl^ sjl^- 7flo]7l# ^*Hr &*V, 

A oM 7fl<y?lS.^-Bi kiXk 2 3. n 7fl^ *31-§- Sth^j-fe ^ 7 fl7l 

(111 a t )# ^*Hr #7fl; 

AJ-71 c,l^l^i« n 7fls] 7fl si «l2=«I E={ei,e 2 ,...,e n } f ej€={0,l} 3. 

#71 ^JlS^ S « ^cM 7^711- o]-g-s]-^ A o V 7 ] 

°l^iL ^#§>fe ^7)11- £#*Vfe 4^ CL3.S}^ ol^l c]lolEi JiJg. 

[^^* 2] 

^-7] 7Ho]7'll- *j^Hr #7ilfe 

2 ol^voiji kiXk 2 -l °l ^ u # -y^l-JL, u 7HS] o 0 toi 

17 
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/ / / /,+/,+...+/ 



1 " S ~ U ^ ^-7^11- ^§>fe ^ s ofl Cfl*>^ ^°17> l s <?] ^7} 



12 # ^*Rr #7fl; 



3. *ll wi ^ k 2 xk 2 13- ^£ ajjt w> * <§^*>fe 



\<t< L 

(ij)=(l,l)tl * CCt.(l.l) = di., a SVal, 



cc / ? (l,l) < d 1,1 



» -J^Vfe ^£HH <d^*V^, 
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2<(M)*,+/<k-i 7 * 

(i,j)7> ' * <?] 34-°fl, " <=1^ CCt.(ij)^ 



<i-l )*,»./- 1 <i-l)*,*y 
CgO) OlC^C] ^^Sf Jl ; ' ' 



0-1 )*,+/- 1 

(U)7i- (i-Dk 2 +j = u «y ^^-<hi, J=1 ccuij^ 



3. 



u+l<(/-l)*.+/'<*iXfc,-l l<r<w 

(ij) 7f o] ^-?-oll ccuij,, ~~ ~~ r °J 
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0-1 )K +f - *, X *, \<t<n 

(ij) 7} ' 6 J ~~ ~ cc t (ij) = 0 



(DC 

a*^*}^ kiXk 2 S. n 7fl^ 41 '- c/a/) » 3^*Hr #3]; 



c. . =cc. r . (mod A/) 
a. - cc.,. A w„ (mod M) £/, 

n 

W2 # ^*>Tr #7^ ^"71 2,^7} CC, * ^*Hr ^o)j7 ^7fl?l# 

*d^^. 
[3^* 3] 
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n 7fl^ ogo^o] ri> r2) .. Mrn -g- aJbjisv ^ *W> « 

#31 U M ^M^-fr Jfl^SHr #31 Afolofl sj^ cc, ^ 4 <?1^1 r, «- o^} 

^ ^r^l* c-1 ^l^Rr effe uflo]E^ ai 

[^t** 4] 

cc t A ol^ofl rt « cjSHr #31 r t # 3«Hr #317} ftfe ^oflfe 

sjl^ ~ <8^°fl « U >^ 7 1 ^r* ^«8*Kr #31* c| ^ 

«l*Rr ^-1: ^-^^-S. o}^l ^M. c-flojE] ?i^ u o V ^. 

[3^* 5] 

^ 2 ^ S^r *fl 3 *<h ^ <Hii *cMl Sa<H>H, 
^■71 ol^l^iL cfl ol B\ # ^-f^fe #31^ 

-1 -1 

Wl, w 2 ^ M ^1 cflt!- ^-ft'S^ - 1- ^o 1 ^ # 

31; 

A oM <3 °l-g-s}°4 §1-71 a] Ajofl tcj-e^ *|1 si t ^*Hr #31; 
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' =1 * ~ ei tt "0" ^ "1" ^-^ojji, bt 

TT kiXk 2 *1 



5 1,(1,1) 5 1,<VR: 2 > ^ t ^AV^ 



^-71 ^1 1 tiling ^^7>^^ 3.^3 



" 1 ^ *fl 1 °l^Ji» <£fe #31; 



■^•,cwt,,, H v/* ! ].* l ) s.«.e^ *fl v tiling 7fl<+*Hf 

#31; 

( ^ tH- 1 1 ? ^ v+ 1 2 5 " " ' 5 ^ v+ 1 / ) 



( ^ w+P g V..+2'"--' C w+/ +| ) 

A o v 7l *j| v til JilSJt-i- 31^}-£r #3le}- ^1 v ol^l^il-I- c_V 
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6] 

A o V 7l ol^l^gja. cflolEil- <LM1 7> 

-1 -1 

w w 

Wi, W 2 2]Mf 1 ' 2 1- ig^SHr ^-^1; 



r l 

,= 1 H7H ei ^ "0" 4 "i" 9\ ^-^o]jl, bt 

kiXk 2 S] *Jl«y) 



1.(1.1) l.(Ar,.^ 2 ) ^ i TflAV^^ -3:741; 



{d n ,d l2 ,...,d u } 



V 7f 2 si #JL, o]^ %v njj, 



, , C £ WA- , ] h- 1 , v-h 1 - [ v/& , ] - A ,) ^ v r C A" , 



23 



+ 



rl/KR 00/00640 




^■71 A] v ^l^SM" 31 #31 2]- ^1 V °l^^iLl- # 

r V 7f 3^] U tiV^-sVfe #31* i^V^r #31; ^ 



(e l5 e 2 ,..., <- , ) 
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^ ^Tfl, ^•7fl7'l# oj-g-^H ^JSll: °J1^5}r #7)1, ^ ^SLIS}- i*H> 

fe- 3^3.^ °J-^5(-l- ^-7fl7) ^ 7flol?l &<H*1 i*7> S^^-fr A]~g- 
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^METHOD FOR TRANSMITTING BINARY INFORMATION WITH 



SECURITY 



BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to a method for transmitting 
binary information through electronic transmission media, and 
more particularly to a method for encrypting and deciphering 
binary information in transmission with the use of super- 
increasing matrix sequence. 

Description of the Related Art 

In case of transmitting information through electronic 
transmission media in recent, especially in data transmission 
between computers, security matter is being gradually amplified. 
Actually, data transmitted through transmission lines is 
relatively easily overheard, which means that important 
information can pass to third party's hands . . In order to prevent 
such risk, it is necessary to encrypt information for 
transmission not to be easily read by a third party. 

For the encryption of information, various types of 
encryption methods have been proposed. The encryption methods 
are largely classified into a symmetric-key method and a public 
key method. The symmetric key method is a method of using a 
deciphering key identical to an encrypting key, and the public 
key method is a method of using a deciphering key different from 
an encrypting key. The symmetric key method has benefits in 
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in order to lower or control an information transmission rate of 
a transmitter. In case of requiring the buffers, some actions 
should be taken in order for information not to be lost when a 
signal indicating that a receiving station is not ready for 
receiving the information is generated. 

In the meantime, as an alternative for overcoming the 
problem of the RSA transmission system, a public key 
transmission system of a knapsack type has been developed. The 
system is called "knapsack" since it hides the properties of a 
super-increasing integer sequence in the public key. The super- 
increasing integer sequence refers to a set of integers S^tSx, S 2/ 

/-I 

s t > E 

S„) composed of positive integers satisfying J 1 . The 

system is known to have faster encryption and decryption speeds 

than the RSA transmission system. Hereinafter, the public key 

transmission system of the knapsack type will be described in 

detail . 

The public key transmission system of the knapsack type 
includes steps of: producing a private key and a public key as 
in the other public key transmission systems, encrypting 
information with the public key; transmitting the encrypted 
signal; and deciphering the transmitted encrypted signal with 
the private key. 

With the steps ramified, the private key is first produced 
and then the public key is produced from the produced private 
key. Information is encrypted by using the produced public key 
and then transmitted. A receiver uses the private key to 
decipher the encrypted information. Such step is described as 
below with an example. 
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If transmitting such encrypted signal, the information 
prior to the encryption is extracted from the transmitted signal 
in a receiving stage (deciphering) . The step is as follows. That 
is, the encrypted signal P is multiplied by VT 1 , wherein the VT 1 
is a positive integer of satisfying {W*^ 1 } (mod M')=l, and then a 
residue class is obtained based on the M' - If the obtained 
value is Q, the Q is expressed as follows: 

Q=(W- 1 *P)Jmod M' ) 
-435 

where, if the P is substituted with A • E, Q=(W" 1 *A • E) , and 
then if the A is substituted with (W*B) (mod M' ) , Q={W- X * (W*B> 
(mod M' ) • E} (mod M' ) - 

The W" 1 is just a constant, so that the VT 1 can be put in the 
parentheses. A residue class regarding the M' of the W~ X *W is a 
1, so that the result expression is (B • E) (mod M' ) . If the E 
is defined as (e lt e 2/ e 3/ e 4 , e 5/ e 6 ) , the result expression is 
re-expressed as follows: 

435={(12, 17, 33, 74, 157, 316) • (e w e 2 , e 3 , e«, e 5 , 
e 6 )}(mod 737). Here, (12, 17, 33, 74, 157, 316) is the super- 
increasing integer sequence, so that the E can be easily 
obtained. That is, the information E=(l, 0, 1, 1, 0, 1) prior 
to the encryption can be easily extracted from 435 = 12e x + 17e 2 
+ 33e 3 + 74e 4 + 157e 5 + 316e 6 . 

However, the system is severely affected in its safety by 
attack methods developed by Brickell, Lagarias, and Odlyzko, 
Schnor, et al. That is, a private key of a receiver is easily 
found by a third party, so that a problem information data is 
easily leaked has occurred. Most of such attach methods rely 
upon a low density attack method based on the Lattice Basis 
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of: producing a private key including n matrices composed of 
kxxk 2 ; producing a public key including n matrices composed of 
kiXk 2 from the private key; dividing binary information to be 
transmitted into n plural bit sequences E = {e x , e 2 , e n } , e L e 
{0, 1}; encrypting the plural bit sequences E by using 
respective public keys; forming transmission data S by 
incorporating encrypted information; transmitting the 
transmission data S to a receiving station; and extracting 
binary information data from the received transmission data S in 
the receiving station by using the private key, wherein the step 
for producing the private key is placed prior to the step for 
extracting the binary information data. 

After producing the public keys, an addition of a random 
number to respective matrices composing of the public keys 
and/or the execution of an order change function can make the 
extraction of a private key from the public key difficult. In 
the above case, binary information data E to be transmitted can 
be exactly extracted by adding a certain number and/or executing 
an inverse function of the order change function before 
deciphering. 

BRIEF DESCRIPTION OF THE DRAWINGS 



The above object and other advantages of the present 
invention will become more apparent by describing the preferred 
embodiment thereof - in more detail with reference to the 
accompanying drawings, in which: 

FIG. 1 is a flow chart for showing a process of producing 
a private key and a public key according to an embodiment of the 
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After that, a super-increasing matrix sequence having a 
matrix size of k x xk 2 and length n is produced as follows (step 
130). If the matrix sequence is referred to as cc t = [cc t> in 
1 < t < n, 1 < I < k lf 1 < j < k 2/ respective cc t((ifj) are produced 
as follows. 

© in case of (i, j ) = (1, 1) , cc t(1(1) = d 1<t in 1 < t < l x and 
cc taa) has a random positive integer satisfying 

n 

-?x, CC '-< 1 ' ,)<C?1,1 

'~ /, " H in S t < n. 

© in case that (i,j) satisfies 2 <, (i-l)k 2 +j < u-1, cc t>(i>j) 

(M)* 2 +/-l 

i</< 2 i s 

has a random positive integer in 5-1 , 

in 5=1 ^ 

and another random positive integer satisfying 

n 

2 CC t (i n <d , . m + . , (M)* 2 +/ 

in 5=1 

© in case that (i,j) satisfies (i-l)k,+j — U/ cc t(i# jj has a 

(M)* 2 +/-l 

i<t< S /, 

random positive integer in 5 1 and 



- 2 in 5=1 

© in case that (i,j) satisfies u+1 < (i-l)k 2 +j < kxk 2 -l, 
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as follows. 

Respective elements exist between 0 and M with at s 
w^wj (mod M) . Accordingly, the public key a t = (a lf a 2/ a n ) 
are completed. 

5 FIG. 2 is a flow chart for showing an encryption process 

of information to be transmitted by using the public key of FIG. 
1. 

The encryption is performed by multiplying the information 
to be transmitted, which is divided into n bits, by the public 
10 key (steps 210 and 220). 

Let E be the information containing only 0 and 1 and 
having a length n. 

That is, E = (e t , e 2 , e n ) , et e {0, 1} 

The encryption is carried out by multiplying information E 
15 to be transmitted by a public key a. If an encrypted signal is 
indicated as S, the S may be expressed as Formula 2 as below: 
Formula 2 
n 

S= Y*e t a t 

FIG. 3 is a flow chart for showing a deciphering process 
20 with respect to an encrypted signal. A process for extracting E 
from the encrypted signal s is as follows. 

W x " 1 and W 2 _1 of residue class operation inverse matrices 
with respect to M of W x and W 2 are calculated and multiplied by s 
to produce a cyphertext of an intermediate step (steps 310 to 
25 330). Let such result be S lf then formula 3 is as follows. 
Formula 3 

Sj = w 1 * l sw 2 " 1 (mod M) 

where, s x is a matrix satisfying 0 < s x , u<j) < M, a formula 
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in v e {1, 2, u-1}, a value of (e'^, e'^, e'^ lv+1 ) is 

obtained as follows. That is, the value is obtained from the 
calculation of the value of (x^, x w+2 , x w+lv+1 ) in an equation 

^vX[vA a ]+l f v+l-[v/t 2 ]-A 1 )" l ^v.(*i.*a) == ^ X "*J ( * V + X J 
of J when 

w 

f 1 - The use of a super-increasing property of 

(dv + i,i/ <*v+i,2/ -/ ci v+1#lv+1 ) enables a value of <e' w+1 , e'^ 2 , „., 

e'w+iv+i) to be easily obtained. All the values of (e 7 w e' 2 , 

e' n ) are obtained through the mathematical induction method. 

After that, the original message of E = (e lf e 2 , e n ) is 

obtained as follows through the use of the property of e t = e'^^, 

That is, E « (e lf e 2/ e n ) = (e' na) , e'. (2)/ e' slnJ ) 

The signal E prior to the encryption is deciphered through the 

above process . 

The public key transmission system based on this method is 
much better in a speed point of view, compared to the other 
public key transmission system and shown in Table 1. 
Table 1 





Present invention 


NTRU 


RSA 


Operation speed 


n 


n 2 


n 2 


Inverse operation speed 


n 


n 2 


n 2 


Operation key length 


n 2 


n 


N 


Inverse operation key length 


n 2 


n 


N 


Message extension degree 


1.5-1 


3 or 4-1 


1-1 



As shown in Table 1, the present invention has a much faster 
speed in the encryption and decryption, compared to the existing 
NTRU or RSA system. The matter of prolonging a public key 
length and a private key length does not cause any problem due 
to the improvement of the performance of system memories 
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CLAIMS 

1. In a method for safely transmitting binary information 
constructed with plural bits through electronic transmission 
media, the method comprising steps of: 

producing a private key including n matrices constructed 
with k x x k 2/ when ^ and k 2 are positive integers, k x x k 2 is an 
integer larger than 3, and n is an integer larger than 2; 

producing a public key {matrix sequence a t ) including the n 
matrices constituted with the k x x k 2 from the private key; 

dividing the binary information into n plural bit 
sequences E = {e lt e 2 , e n ) in ei e {0, 1}; 

encrypting the plural bit sequences E respectively by 
using the public key; 

incorporating the encrypted information and forming 
encrypted transmission data S; 

transmitting the encrypted transmission data S; and 
extracting the binary information data from the encrypted 
transmission data S by using the private key. 

2. The method as claimed in claim 1, wherein the step for 
producing the private key includes steps of: 

forming u super-increasing integer sequences d w d 2 , 
expressed as d s = (d^, d s , 2 , d s , ls ) of a super-increasing 

integer sequence having a length l s with respect to each S 
satisfying a relationship of 1 < s < u, after arbitrarily 
selecting an integer n larger than 2 but less than k x x k 2 -l, 
selecting u positive integers l x , 1 2/ l u , and setting the 
integer n of a total sum of 1 1 + 1 2 +, +l u ; 

selecting a random integer M larger than 
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(i-l)* 2 +/-l 

l<t< 2 /, 

a) a random positive integer in * 1 , and 



cc. =<i 



b) '"' in 

(i-l)* 2 +y-l («-1)*2+/ 

2 /, + l<r< E 

5=1 ^=1 

4) if (i/j) satisfies u + 1 < (i-l)k 2 + j < k x x k 2 -l, 
a random positive integer in 1 < t < n, and 

5) if (i/j) satisfies (i-l)k 2 + j = k x x k 2/ 
* 0" ; and 

calculating a residue class of M as in c t#Ufj) = cc t> (mod 
M) , wherein the step for producing the public key is 
accomplished by producing at satisfying a t = w x cc t> ti(j) w 2 (mod M) , 
the step for forming the encrypted transmission data S is 
accomplished by producing the S satisfying a formula 

r=1 , and the steps for selecting the M and producing 

the w x and w 2 is carried out after the step for forming the 

super-increasing matrix sequence cc t and before the step for 
forming the public key. 

3. The method as claimed in claim 2, further comprising a 
step, after selecting n random positive integers r ir r 2 , .../ r n , 
for adding r t to respective elements between the step for 
forming the cc tfli<j) and the step for calculating the residue 
class of M. 

4. The method claimed in claim 2 or 3, further comprising 
a step, in case that there does not exist the step for adding r t 
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forming a matrix Sj according to a following formula by 

using the inverse matrices: 
n 

, wherein e ± is a function of 
w 0" and "1" and b t is a matrix of k x x k 2 ; 

calculating a first comparison value from s 1# (1#1J -s lr(klfk2) ; 

obtaining first binary information of (e x/ e 2 , e xl ) from 
the first comparison value and a super-increasing integer 
sequence {d xl , d 12 , d li2 }; 

calculating a vth comparison value from s Vr([v/Jt2] + 1# v + 1Mv/lc2] . 

k2)-s v , (U#k2) when the v has a value of 2 and 7 1 ; 

obtaining vth binary information of (e w+1 , e w+2 , ew+jv+1 ) 
from the vth comparison value and a super-increasing integer 
sequence (d^^, d v + 1<2 , d^ lmlwX ) ; 

iterating the step for calculating the vth comparison 
value and the step for obtaining the vth binary information till 
the v has values from 3 to u; and 

applying an inverse function of the permutation function) 
to the (e lf e 2/ e lu ) . 
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FIG.1 
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FIG. 2 



INPUT A PLAINTEXT 



E=(e !,e 2 , •,e n ),e t e=}0,l} 




200 



COMPLETE A CIPHERTEXT 




220 



s= Setat 



COMPLETE THE CIPHERTEXT 



FIG.3 



INPUT A CIPHERTEXT 




at 



PRODUCE S i 



Si =uu f 1 suul 1 (modM) 



PRODUCE A DECIPHERTEXT 
FOR AN INTERMEDIATE STAGE 



(e'i ,eg ,'--,e'n ) 



PRODUCE A PLAIN TEXT 



310 



320 



330 



•340 



=(ei ,e 8 .•••,e n )=(ei 1)j eL<2v,e^ l o) 



COMPLETE THE PLAINTEXT 



INTERNATIONAL SEARCH REPORT 



ternational application No. 
PCT/KR0O/0O640 



A CLASSIFICATION OF SUBJECT MATTER 
IPC7 H04B 1/00 

According to international Patent Classification (IPC) or to both national classification and IPC 



FIELDS SEARCHED 



Minimun documentation searched (classification system followed by classification symbols) 
IPC7 H04M 1/00 



Documentation searched other than minimun documentation to the extent that such documents are included in the fileds searched 



Electronic data base consulted during the international search (name of data base and, where practicable, search trerms used) 
Patrom 

FPD, PAJ, WPI 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



US 5872846 A (MCI Communicatios Corporation) 16 FEB. 1999 
See the entire document 

KR 98-77685 A (LG Electronic CORP.) 16 NOV. 1998 
Sec the entire document 



KR 98-35958 A (LG Electronic CORP.) 5 AUG. 1998 
See the abstract and background of the invention 



US 5592554 A (Siemens Aktiengesellschaft) 7 JAN. 1997 
See the abstract and column 2 



US 5588061 A (Bell Atlantic Network Services Inc.. Bell communications Research Inc.) 

24 DEC. 1996 

See the abstract and claims 



[~| Further documents arc listed in the continuation of Box C. 



f | See patent family annex. 



"E" 



Special categories of cited documents: 
A" document defining the general state of the art which is not considered 
to be of particular relevence 

earlier application or patent but published on or after the international 
filing date 

document which may throw doubts on priority claim(s) or which is 
cited to establish the publication date of citation or other 
special reason (as specified) 
"O" document referring to an oral disclosure, use, exhibition or other 

"P" document published prior to the international filing date but later 
than the priority date claimed 



T" later document published after the imernauonal filing date or priority 

date and not in conflict with the application but cited to understand 

the principle or theory underlying the invention 
"X" document of particular relevence; the claimed invention cannot be 

considered novel or cannot be considered to involve an inventive 

step when the document is taken atone 
T document of particular relevence; the claimed invention cannot be 

considered to involve an inventive step when the document is 

combined with one or more other such documents^uch combination 

being obvious to a person skilled in the art 

document member of the same patent family 



Date of the actual completion of the international search 
18 OCTOBER 2000 (18.10.2000) 



Date of mailing of the international search report 
18 OCTOBER 2000 (18.10.2000) 



Name and mailing address of the ISA/KR 
Korean Industrial Property Office 

Government Complex-Taejon, Durtsan-dong, So-ku, Taejon 
Metropolitan City 302-70K Republic of Korea 

Facsimile No. 82-42-472-7140 



Authorized officer 

JEONG, Hyun Su 
Telephone No. 82-42-48 1 -5949 




Form PCT/ISA/210 (second sheet) (July 1998) 



INTERNATIONAL SEARCH REPORT 


International application No. 




PCT/KROO/00640 



A. CLASSIFICATION OF SUBJECT MATTER 



IPC7 H04B 1/00 

According to International Patent Classification (IPC) or to both national classification and IPC 
B. FIELDS SEARCHED 

Minimun documentation searched (classification system followed by classification symbols) 
IPC7 H04M 1/00 

Documentation searched other than minimun documentation to the extent that such documents are included in the fileds searched 



Electronic data base consulted during the international search (name of data base and. where practicable, search trerms used) 
Patrom 

FPD, PAJ, WPI 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



US 5872846 A (MCI Communicatios Corporation) 16 FEB. 1999 
See the entire document 

KR 98-77685 A (LG Electronic CORP.) 16 NOV. 1998 
See the entire document 



KR 98-35958 A (LG Electronic CORP.) 5 AUG. 1998 
See the abstract and background of the invention 



US 5592554 A (Siemens Akticngcscllschaft) 7 JAN. 1997 
See the abstract and column 2 



US 5588061 A (Bell Atlantic Network Services Inc., Bell communications Research Inc.) 

24 DEC. 1996 

See the abstract and claims 



| 1 Further documents arc listed in the continuation of Box C. 



| | See patent family annex. 



* Special categories of cited documents: 
"A" document defining the general suae of the ait which is not c 

to be of particular reievence 
"E" earlier application or patent but published on or after the international 

filing date 

*L" document which may throw doubts on priority ciaim(s) or which is 
cited to establish the publication dale of citation or other 
special reason (as specified) 

"O" document referring to an oral disclosure, use, exhibition or other 



"P* document published prior to the international filing date but later 
than the priority date claimed 



T later document published after the international filing date or priority 

date and not in conflict with the application but cited to understand 

the principle or theory underlying the invention 
"X" document of particular reievence; the claimed invention cannot be 

considered novel or cannot be considered to involve an inventive 

step when the document is taken alone 
"Y" document of particular reievence; the claimed invention cannot be 

considered to involve an inventive step when the document is 

combined with one or more other such documents^uch combination 

being obvious to a person skilled in the art 

document m emb e r of the same patent family 



Date of the actual completion of the international search 
1 8 OCTOBER 2000 (18.1 0.2000) 


Date of mailing of the international search report 
18 OCTOBER 2000 (18.10.2000) 


Name and mailing address of the ISA/KR 
Korean Industrial Property Office 

Government Complcx-Taejon. Dunsan-dong, So-ku, Taejon 
Metropolitan City 302-701 . Republic of Korea 

Facsimile No. 82-42-472-7140 


Authorized officer 

JEONG, Hyun Su filSSA 
Telephone No. 82-42-481-5949 ^M^*^ 



Form PCT/ISA/210 (second sheet) (July 1998) 



